Risk management and contingency planning: identifying and assessing risks, the purpose and contents of contingency plans, and the benefits and limitations of planning for the unexpected.

What this dot point is asking

WJEC Unit 4 covers risk management and contingency planning: how a firm identifies and assesses the risks it faces, what a contingency plan contains, and the benefits and limitations of planning for the unexpected. Strong answers weigh the likelihood and impact of risks, recognise that planning is about being prepared rather than predicting, and judge when a plan is worth the cost.

The answer

Identifying and assessing risk

Assessing risk by likelihood and impact lets a firm prioritise: a high-likelihood, high-impact risk demands a plan, while a rare, trivial risk may simply be accepted. The responses to risk are to avoid it (not do the risky activity), reduce it (safety measures, back-ups), transfer it (insurance), or accept it (bear the small cost).

Contingency planning

A good contingency plan identifies the risk, sets out the immediate response, names who is responsible, covers communication with stakeholders, and provides for continuity (back-up systems, alternative suppliers, emergency funds).

Benefits and limitations

The benefits of risk management and contingency planning are real: a faster, calmer response to a crisis, less damage to reputation, customers and finances, business continuity, and greater stakeholder confidence. But there are limitations:

• Cost and time to prepare and maintain plans.
• Not every risk can be foreseen - some crises are genuinely unpredictable.
• False confidence - a plan may not work in practice.
• Plans go stale - one never updated or tested can fail when needed.

So planning should be proportionate (focused on high-likelihood, high-impact risks), kept up to date and tested.

Examples in context

Example 1. A prepared product recall. A food firm with a tested contingency plan discovers a contamination problem and executes its recall plan immediately - withdrawing stock, informing customers and the regulator, and communicating openly. Because it was prepared, it limits the harm to health, reputation and finances. The example shows contingency planning turning a potential disaster into a managed, contained event.

Example 2. An unprepared firm in crisis. A business with no plan suffers a major IT failure and loses customer data, with no back-up and no agreed response. It reacts slowly and chaotically, the breach worsens, and trust and revenue are lost. The example illustrates the cost of neglecting risk management: the same event is far more damaging without a plan, which is why firms invest in proportionate preparation.

Try this

Q1. Define the term contingency planning. [2 marks]

• Cue. Preparing in advance a response to a specific possible crisis, setting out the actions to take and who is responsible, so the business can react quickly and limit damage.

Q2. Explain one limitation of contingency planning. [3 marks]

• Cue. For example, it costs time and money to prepare and maintain, cannot foresee every risk, or can give false confidence if the plan is never updated or tested - any one, explained.